Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
File: FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft (raw, json)
Hash identifier: GgixLGS0El9+fm1zHLP9nSz5mGZ9XO5IO68YaIN7pzs=
Subject key identifier: 79:FE:CB:15:A7:D9:0B:B3:DB:91:D9:A9:1F:EA:F0:24:23:74:B1:68
Authority key identifier: 14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
Certificate issuer: /CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Certificate serial: 019F83B0932F8EB1F0051102F0A9AEB598DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
Manifest number: 0FC6
Signing time: Tue 21 Jul 2026 08:00:14 +0000
Manifest this update: Tue 21 Jul 2026 08:00:14 +0000
Manifest next update: Wed 22 Jul 2026 08:00:14 +0000
Files and hashes: 1: FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl (hash: +mFbvtmXvo3jls1YW9K4EBB9BOnpW0Q46pqHI1Ukf6c=)
2: jjz54tPWsuXjHrsRR3lGh9uQu6o.roa (hash: 02vfAYgOdeQNaFi8ZY69MJehPQkiX3iDuuBOrYgPuMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:b0:93:2f:8e:b1:f0:05:11:02:f0:a9:ae:b5:98:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Validity
Not Before: Jul 21 08:00:14 2026 GMT
Not After : Jul 22 08:00:14 2026 GMT
Subject: CN=79fecb15a7d90bb3db91d9a91feaf0242374b168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:af:24:87:7b:53:4d:be:46:2c:59:59:1d:fb:
9c:38:e7:3f:49:3c:23:71:9e:07:91:ef:eb:f3:15:
94:97:0f:3b:a1:42:92:1a:cb:58:be:17:23:82:e3:
2e:9f:7c:8f:7a:f3:ad:dc:db:42:c5:18:77:0c:56:
d7:d7:53:57:bd:ec:6b:b7:93:61:cc:9a:83:c3:9a:
47:c6:97:57:84:d5:91:47:ec:7a:fd:cd:3f:74:6f:
28:d9:5d:94:01:17:10:46:5e:7f:16:b0:58:1f:55:
f0:e5:ea:a4:f1:f3:fb:92:0f:cb:a2:61:be:6b:56:
71:50:88:10:0b:40:94:e4:98:a4:3b:03:9d:a8:dd:
fb:6c:03:d5:48:63:dc:7d:39:6d:d9:64:6e:3d:7e:
88:8f:6d:c4:71:01:01:c4:10:4e:3c:68:45:ea:c7:
88:98:c0:c3:39:1d:9a:cb:8d:2d:a0:a7:96:60:a7:
94:8b:f6:65:b1:bd:96:3d:35:f9:ab:a7:e9:53:eb:
af:33:a5:4b:dc:04:6c:eb:d4:b2:0e:83:41:2b:96:
8f:74:04:d3:3f:0d:66:6c:82:ea:11:28:00:9d:61:
3f:88:9e:da:1c:c3:51:62:89:f0:b6:6a:4e:db:78:
e4:8c:1e:58:56:21:72:4b:0f:00:98:21:e3:6f:8e:
d9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FE:CB:15:A7:D9:0B:B3:DB:91:D9:A9:1F:EA:F0:24:23:74:B1:68
X509v3 Authority Key Identifier:
keyid:14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:71:4b:c3:88:af:be:17:2a:77:32:73:af:20:4b:a7:67:c0:
fb:ef:15:de:75:7b:ef:26:ee:b9:8d:f8:97:63:c8:4b:b6:93:
95:e0:68:a9:94:fd:d1:39:df:ae:c2:91:0a:cd:00:77:07:e1:
30:bd:f8:d2:b8:fb:ed:76:e9:2b:d6:c0:64:51:e5:0e:c9:fc:
29:b3:db:20:fe:d9:ec:4f:5a:02:d8:35:75:d2:4e:91:e4:e9:
54:30:eb:e2:39:11:d3:61:91:3a:1c:e1:35:21:0e:d7:b6:a8:
99:c8:fc:36:96:81:89:00:63:ff:b6:a4:6d:24:f0:53:9c:5e:
84:77:68:b3:f3:38:1c:03:d2:93:9f:a1:1c:4d:8a:9b:41:6f:
cf:a0:c7:d5:56:16:56:b2:03:5d:0c:1b:1f:a7:a4:51:d3:23:
9c:35:4e:63:04:b4:df:af:a0:bd:b1:42:45:5a:fe:27:b8:a2:
63:f7:d1:dc:23:e1:56:c0:98:c2:f2:13:65:b7:68:b2:79:79:
26:16:1b:92:04:ab:28:45:fd:7f:80:6a:03:23:08:11:12:e8:
f2:0e:4b:5e:de:50:c6:bd:72:09:6d:ca:cb:26:36:b9:31:c1:
9b:d2:56:64:c8:36:65:d1:32:a8:e9:8e:8e:84:31:68:95:e9:
7d:35:39:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:26:58 2026 by rpki-client